Manifest

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
File:                     EUZfw0oIeBMpxIgj9JEEdltcMzs.mft (raw, json)
Hash identifier:          ZAvybda9ZhwBxa5b0ulNFtaTwnuCHaZ/PJ3Jt0QSWzs=
Subject key identifier:   E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
Authority key identifier: 11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B
Certificate issuer:       /CN=11465FC34A08781329C48823F49104765B5C333B
Certificate serial:       03F7
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
Manifest number:          03D8
Signing time:             Mon 28 Apr 2025 09:51:37 +0000
Manifest this update:     Mon 28 Apr 2025 09:51:37 +0000
Manifest next update:     Wed 30 Apr 2025 09:51:37 +0000
Files and hashes:         1: EUZfw0oIeBMpxIgj9JEEdltcMzs.crl (hash: RQPAhetiLtltqKnYtjuRU6DDvACZPibY8ooytiDV7Eg=)

Validation:               OK
Signature path:           rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl
                          rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 22:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11465FC34A08781329C48823F49104765B5C333B
        Validity
            Not Before: Apr 28 09:51:37 2025 GMT
            Not After : Aug 26 01:57:03 2025 GMT
        Subject: CN=E00FA148901B9490C7D86E998FF2E43D2EA1DD9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ab:6f:ed:5a:14:6f:fb:ce:5f:13:ca:43:93:
                    48:be:29:e4:5b:64:27:af:d2:3e:d8:d1:26:cd:5d:
                    64:31:34:c3:fe:7f:5f:93:5a:75:59:01:75:8b:2d:
                    2a:19:0b:97:c3:1b:70:f0:d4:c4:76:25:13:a6:7e:
                    a2:c8:4f:ee:a9:65:78:3e:52:50:44:40:69:e8:57:
                    8c:6c:82:df:60:a1:6a:a2:a1:54:89:1f:5a:75:99:
                    07:f9:fe:d0:5a:ff:83:6a:db:f1:54:42:4b:52:ea:
                    86:d2:95:3f:3c:4f:a7:7d:ab:1e:3b:b5:3a:8a:72:
                    51:4b:f3:cc:5a:1c:40:24:b0:91:eb:16:5e:c2:40:
                    f4:b4:ed:f9:01:94:64:ef:28:e7:df:49:51:ff:76:
                    d0:59:b7:12:84:5f:20:19:2b:77:22:c7:a0:6f:1c:
                    fe:dc:d6:c7:1d:21:66:c5:01:59:df:bf:9e:51:11:
                    f7:fa:26:5d:ab:b2:0d:b8:f7:f0:84:7c:a0:20:8e:
                    2b:f0:24:d0:b4:61:ae:c3:80:8a:02:20:81:7f:3b:
                    30:f0:d0:43:76:70:a9:5a:fd:cc:a2:f2:fe:67:b9:
                    c8:6e:be:83:54:fe:b5:19:87:90:ad:26:c8:48:8a:
                    09:c5:24:cf:1b:3b:ac:da:a5:d5:c3:34:59:8a:22:
                    26:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:0F:A1:48:90:1B:94:90:C7:D8:6E:99:8F:F2:E4:3D:2E:A1:DD:9B
            X509v3 Authority Key Identifier:
                keyid:11:46:5F:C3:4A:08:78:13:29:C4:88:23:F4:91:04:76:5B:5C:33:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/EUZfw0oIeBMpxIgj9JEEdltcMzs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/CHAIJIN/EUZfw0oIeBMpxIgj9JEEdltcMzs.mft
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:b2:2a:94:d5:e8:1c:5d:cc:e4:3a:d5:67:5b:a0:99:9e:
         28:04:58:7b:2c:85:5d:86:9a:35:f1:23:1e:0e:57:12:7f:b5:
         4c:72:32:c8:8f:f0:5f:24:ae:4f:6a:3c:11:8d:b4:e0:8d:27:
         c2:c5:42:44:0d:a8:88:be:56:e4:18:52:a0:aa:c6:c6:f7:b6:
         ef:2c:f4:72:e0:1f:46:15:13:a8:da:e8:fb:1a:9c:bf:a7:a1:
         ec:21:ea:49:27:b3:46:9e:df:4a:f6:c9:ce:d1:9c:f3:ed:d8:
         0a:80:0d:d6:c9:99:21:2d:b8:81:3a:ed:24:87:7a:92:f5:ed:
         d6:3c:7f:81:50:59:31:69:7d:b8:06:0e:6a:22:22:f0:98:56:
         7c:7e:fe:00:e1:c0:da:7a:ce:c4:db:66:53:fa:40:d7:35:9f:
         45:9c:fc:61:85:3a:71:3f:bf:19:32:8c:a1:28:fa:1f:b5:dd:
         7e:20:5a:4c:05:f4:89:ac:21:38:00:11:4e:40:03:51:13:9c:
         8f:3e:4c:7e:d7:fa:dc:44:72:ac:36:0f:b3:e8:04:56:ed:50:
         18:d2:6f:87:da:b0:cc:2a:c4:04:7b:43:4b:e5:a3:b7:a6:f3:
         87:0c:b1:db:25:1a:6f:30:e1:28:b3:6d:3d:3f:9b:f7:c6:f2:
         89:e5:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:12:34 2025 by rpki-client on console.sobornost.net